CVE Feed

    Dashboard / CVE / CVE-2007-2799

    CVE-2007-2799

    Integer overflow in the "file" program 4.20, when running on 32-bit systems, as used in products including The Sleuth Kit, might allow user-assisted attackers to execute arbitrary code via a large file that triggers an overflow that bypasses an assert() statement. NOTE: this issue is due to an incorrect patch for CVE-2007-1536.

    Published:May 23, 2007
    Last Modified:Apr 23, 2026
    EPS:May 23, 2007
    EPSS Score:0.03487
    CVSS Score:5.1

    Affected Products

    Vendor
    File
    Product
    File
    Vendor
    Redhat
    Product
    Enterprise Linux
    Vendor
    Sleuth Kit
    Product
    The Sleuth Kith

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-190 Integer Overflow or Wraparound

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-92 Forced Integer Overflow

    References

    ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-001.txt.asc
    http://docs.info.apple.com/article.html?artnum=307562
    http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html
    http://osvdb.org/38498
    http://secunia.com/advisories/25394
    http://secunia.com/advisories/25544
    http://secunia.com/advisories/25578
    http://secunia.com/advisories/25931
    http://secunia.com/advisories/26203
    http://secunia.com/advisories/26294
    http://secunia.com/advisories/26415
    http://secunia.com/advisories/29179
    http://secunia.com/advisories/29420
    http://support.avaya.com/elmodocs2/security/ASA-2007-290.htm
    http://www.amavis.org/security/asa-2007-3.txt
    http://www.debian.org/security/2007/dsa-1343
    http://www.gentoo.org/security/en/glsa/glsa-200705-25.xml
    http://www.mandriva.com/security/advisories?name=MDKSA-2007:114
    http://www.novell.com/linux/security/advisories/2007_40_file.html
    http://www.redhat.com/support/errata/RHSA-2007-0391.html
    http://www.securityfocus.com/archive/1/469520/30/6420/threaded
    http://www.securityfocus.com/bid/24146
    http://www.securitytracker.com/id?1018140
    http://www.trustix.org/errata/2007/0024/
    http://www.ubuntu.com/usn/usn-439-2
    http://www.vupen.com/english/advisories/2007/2071
    http://www.vupen.com/english/advisories/2008/0924/references
    https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=241022
    https://exchange.xforce.ibmcloud.com/vulnerabilities/34731
    https://issues.rpath.com/browse/RPL-1311
    https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11012
    ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-001.txt.asc
    http://docs.info.apple.com/article.html?artnum=307562
    http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html
    http://osvdb.org/38498
    http://secunia.com/advisories/25394
    http://secunia.com/advisories/25544
    http://secunia.com/advisories/25578
    http://secunia.com/advisories/25931
    http://secunia.com/advisories/26203
    http://secunia.com/advisories/26294
    http://secunia.com/advisories/26415
    http://secunia.com/advisories/29179
    http://secunia.com/advisories/29420
    http://support.avaya.com/elmodocs2/security/ASA-2007-290.htm
    http://www.amavis.org/security/asa-2007-3.txt
    http://www.debian.org/security/2007/dsa-1343
    http://www.gentoo.org/security/en/glsa/glsa-200705-25.xml
    http://www.mandriva.com/security/advisories?name=MDKSA-2007:114
    http://www.novell.com/linux/security/advisories/2007_40_file.html
    http://www.redhat.com/support/errata/RHSA-2007-0391.html
    http://www.securityfocus.com/archive/1/469520/30/6420/threaded
    http://www.securityfocus.com/bid/24146
    http://www.securitytracker.com/id?1018140
    http://www.trustix.org/errata/2007/0024/
    http://www.ubuntu.com/usn/usn-439-2
    http://www.vupen.com/english/advisories/2007/2071
    http://www.vupen.com/english/advisories/2008/0924/references
    https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=241022
    https://exchange.xforce.ibmcloud.com/vulnerabilities/34731
    https://issues.rpath.com/browse/RPL-1311
    https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11012

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High